you@yourcompany.com
Invoice 2081, as promised
Modern sealed25519Universal sealrsa
Email Security
Your mail stays yours.
Every message you send leaves with two signatures on it, published under your own domain name. The far end reads them and can prove the mail really came from you.
Your mailbox
yourcompany.comWhoever you wrote to
Any inboxyou@yourcompany.com
Invoice 2081, as promised
Checked on arrival
- Modern seal
- Universal seal
This really is from your domain.
Both seals check out against records published in your own name.
Both seals travel with every message you send. The far end checks whichever one it knows, which is why there are two of them.
Set up for you
Three records prove your name is yours.
When your domain is verified and its DNS is with us, all three are written into your zone for you. There is nothing to copy and paste, and nothing to get wrong.
- SPFWho may send as youA published list of the servers allowed to send mail in your name. Anything else is an impostor, and every receiver can tell.
- DKIMTwo signatures, every messageEach message you send is signed twice, with keys that carry the date they were made so they can be replaced without a gap. Setup waits until both are published before it calls itself finished.
- DMARCWhat to do about the restYour published instruction to every receiver, and a report back from them, so you can see who has been sending mail in your name.
If you already have an SPF record, we add ourselves to it rather than writing over it. Every other service you had authorized stays authorized, and if you chose a soft fail we leave it soft. Your record keeps your decisions in it.
DMARC progression
From watching to refusing, at your own pace.
Turning an impostor away is the last step, not the first. Start by watching, see who is really sending in your name, and move up when the picture is clear.
- Day 0WatchNothing is turned away. Receivers report back on every message sent in your name, and you read who has been sending it.
- Day 7QuarantineAnything that cannot prove it is you goes to the spam folder at the other end instead of the inbox.
- Day 14RefuseAnything that cannot prove it is you is turned away. Nobody else can send mail as your business.
You start it and you can stop it. Pause it at any step, put it back a step, or leave it watching for as long as you like. We email you every time it moves.
Coming the other way
What reaches you, and what does not.
Everything arriving at your address is scored before it is delivered. There are three outcomes, and you can see all three.
- It arrivesMail from people you have written to is trusted, and so is a reply to something you sent.
- It goes to JunkEvery message is given a spam score. At 5 it lands in your Junk folder, where you can read it and drag back anything that should not be there.
- It is turned awayAt 20 it is refused while the sender is still connected, so a real person whose message scored badly is told it did not get through.
Nothing is ever silently deleted. There is no score at which mail addressed to you quietly disappears, because the setting that would do that is switched off on purpose.
Your mail program connects over TLS 1.3, and mail moving between servers is encrypted wherever the far end supports it.